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APPELLANTS' BRIEF ON APPEAL 
1. Real Party In Interest 

Applicant is the real party in interest. 

2. Related Appeals 

None. 

3. Status of Claims 

(1) Claims 1-8 and 34-59 are currently pending in this application, stand 
rejected and are subject to this appeal. 

4. Status of Amendments 
A Pre- Appeal Brief Request for Review was filed on February 7, 2006. In a 
decision dated March 9, 2006, the case was passed to the Board of Patent Appeals 
and Interferences. 

5. Summary of the Claimed Subject Matter 
a. Claim 1 

Claim 1 is directed to a method of archiving files performed by a computing 
device. The method includes detecting an instruction by an operating system to 
perform an operation on an operating file. Exemplary support may be found at page 9, 
fl40, lines 1-3; page 13, fl48, lines 1-4, Fig. 3 element 210; page 14, 50, lines 1-3, Fig. 
4, element 305; and page 15, fl51, lines 1-3, Fig. 5 element 405. The method further 
includes capturing the operating file temporally proximate to the operation being 
performed on the operating file, responsive to the detection of the instruction. 
Exemplary support may be found at page 9, fl40, lines 3-8; pg. 13, 1J48, lines 3-4, Fig. 3 
element 210; pg. 14, 1J50, lines 3-4, Fig. 4 element 310; pg. 15, U51, lines 3-4, Fig. 5 
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element 410. 

b, Claim 34 

Claim 34 is directed to a method of archiving files performed by a computing 
device. The method includes detecting an instruction by an operating system to 
perform an operation on an operating file. Exemplary support may be found at page 9, 
fl40, lines 1-3; page 13, 1J48, lines 1-4, Fig. 3 element 210; page 14, 50, lines 1-3, Fig. 
4, element 305; and page 15, fl51, lines 1-3, Fig. 5 element 405. The method further 
includes creating an archive file from the operating file and storing the archive file in a 
temporary first storage location temporally proximate to the operation being performed 
on the operating file and responsive to detecting the instruction. Exemplary support 
may be found at pg. 10, 1J42, lines 1-4. The method still further includes searching the 
first temporary storage location for the archive file responsive to the occurrence of a 
first event Exemplary support may be found at pg. 10, 1J43, lines 6-11; pg. 12, lj45, 
Fig. 2A element 100. The method still further includes moving the archive file to a 
second storage location responsive to a second event, the second storage location 
being a permanent storage location. Exemplary support may be found at pg. 1 1 , 1J43, 
lines 20-27, Fig. 2B element 125; pg. 12-13, 1J46. 

c. Claim 54 

Claim 54 is directed to still another embodiment of a method for archiving files in 
a computing device. The method includes detecting an instruction by an operating 
system to perform an operation on an operating file. Exemplary support may be found 
at page 9, 1J40, lines 1-3; page 13, U48, lines 1-4, Fig. 3 element 210; page 14, U 50, 
lines 1-3, Fig. 4, element 305; and page 15, jf51, lines 1-3, Fig. 5 element 405. The 
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method further includes capturing the operating file just before or just after the 
operation being performed on the operating file, responsive to the detection of the 
instruction. Exemplary support may be found at page 9, 1J40, lines 3-8; pg. 13, 1J48, 
lines 3-4, Fig. 3 element 210; pg. 14, tf50, lines 3-4, Fig. 4 element 310; pg. 15, 1J51, 
lines 3-4, Fig. 5 element 410. 
d. Claim 59 

Claim 59 is directed to yet another embodiment of a method for archiving files 
performed by a computing device. The method includes detecting an instruction by 
an operating system to perform an operation on an operating file. Exemplary 
support may be found at page 9, fl40, lines 1-3; page 13, 1J48, lines 1-4, Fig. 3 
element 210; page 14, 50, lines 1-3, Fig. 4, element 305; and page 15, fl51, lines 
1-3, Fig. 5 element 405. The method further includes creating an archive file from 
the operating file and moving the archive file to a first storage device temporally 
proximate to the operation being performed on the operating file, responsive to 
detecting the instruction. Exemplary support may be found at pg. 10, 1J42 to pg. 11, 
ft43, Fig. 2A element 100. The method still further includes storing the archive file in 
a second storage location. Exemplary support may be found at pg. 1 1 , 1J43, Fig. 2B 
element 125. 

6. Grounds of Rejection to be Reviewed on Appeal 

(a) Whether claims 1-3, 9-12, 15 and 54-57 are unpatentable under 35 U.S.C. 
§103(a) over U.S. Patent No. 6,629,109 B1 in view of U.S. Patent No. 5,638,509. 

(b) Whether claims 34-38, 43-51 and 57-59 are unpatentable under 35 U.S.C. 
§1 03(a) over U.S. Patent No. 5,638,509 further in view of U.S. Patent No. 6,629,109 
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B1. 

(c) Whether claims 4-8 and 1 3-14 are unpatentable under 35 U.S.C. §1 03(a) 
over U.S> Patent No. 6,629,109 B1 in view of U.S. Patent No. 5,638,509. 

(d) Whether claims 39-42 are unpatentable under 35 U.S.C. §103(a) over U.S. 
Patent No. 5,638,509 in view of U.S. Patent No. 6,629,109 B1 and further in view of 
U.S. Patent No. 5,608,865 

7. Argument 

a. Rejections (a) - (d) 

A claimed invention is unpatentable for obviousness if the differences between it 
and the prior art are such that the subject matter as a whole would have been obvious 
at the time the invention was made to a person having ordinary skill in the art. In re 
Zurko, 258 F.3d 1379, 1383 (Fed. Cir. 2001). Obviousness is a legal question based 
on underlying factual determinations including 1) the scope and content of the prior art, 
2) the level of ordinary skill in the art, 3) the differences between the prior art and the 
claimed invention and 4) objective evidence of secondary considerations. Here the 
Official Action has erred in its factual assessment of points 1, 3 and 4 and, therefore, 
the rejections of all pending claims must be reversed. Id at 1 386. 

The Official Action made an incorrect factual finding that the claim term 
"operating system" was equivalent to the API of Koshisaka. The Official Action 
improperly relied upon this factual finding as a basis for its obviousness conclusions in 
all of the rejections. The Office Action fundamentally misconstrued the scope and 
meaning of the term API as used in Koshisaka. The record evidence, including 
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Koshisaka, Dunphy, The Webster's New World Dictionary of Computer Terms 1 , compel 
the conclusion that Koshisaka's API is not equivalent to the claimed operating system. 

Koshisaka itself clearly distinguishes between operating systems and application 
programs. See elements 1 and 3 of Figure 1. More particularly, Koshisaka defines 
Application (from which API commands emanate) as generally used application 
software such as word processor software, spreadsheet software, CAD software, etc. 
In contrast, Koshisaka defines operating system as software for operating the computer 
system, such as Windows 98. 

Further in support of Applicants' position, one of the other cited references, 
Dunphy, discloses an operating system 19 that is separate and distinct from application 
programs 8. See Column 3, lines 36-47 and Figure 1. 

Moreover, applicable technical dictionaries recognize the difference between 
APIs and operating systems. The Webster's New World Dictionary of Computer Terms 
defines "API" as a set of standards or conventions by which programs can call specific 
operating system or network services. The same dictionary defines the plain meaning 
of "Operating System" as a master control program that manages the computer's 
internal functions, such as accepting keyboard input, and that provides a means to 
control the computer's operations and file system. See pages 33 and 338 of Exhibit 1. 

In contrast, not a shred of evidence supports the Office Action's position that 
Koshisaka's API and the claimed operating system are the same. Because the Office 
Action's conclusion of obviousness in each rejection was based on this erroneous 
assessment of the scope of the prior art, all of the rejections lack substantial evidence 



Attached as Exhibit 1 to the Evidence Appendix. 
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support and, for this reason alone, must be reversed. Zurko 1386. 

There is a second fundamental error in the Office Action that at least requires 

that the application be remanded to the Examiner for further consideration. The Office 

Action contains no cogent discussion of the §1.132 Declaration of Steve Williams 2 . 

With regard to the Declaration, the Office Action states as follows: 

"The Declaration under 37 CFR 1.132 filed 09/07/2004 is insufficient to 
overcome the rejection of claims 1-18 and 34-59 based upon rejection of 
1-3 (a) as set forth in the last Office action because: although factual 
evidence is preferable to opinion testimony, such testimony is entitle to 
consideration and some weight so long as the opinion testimony is not on 
the ultimate legal conclusion at issue. While an opinion as to a legal 
conclusion is not entitle to any weight, the underlying basic for the opinion 
as to a legal conclusion is not entitled to any weight , the underlying basic 
for the opinion may be persuasive. In re Chilowsky, 306 F.2d 908, 134 
USPQ 515 {CCPA 1962) (expert opinion that an application meets the 
requirement of 35 U.S.C. 1 12 is not entitled to any weight; however, facts 
supporting a basic for deciding that the specification complies with 35 
U.S.C. 112 are entitle to some weight. Although an affiant's or declarant's 
opinion on the ultimate legal issue is not evident in the case, "some 
weight ought to be given to persuasively supported statement of on 
ordinary skill in art on what was not obvious to him." 

Office Action at page 2. The foregoing description offers no explanation as to why the 

Declaration is insufficient. Curiously, the discussion addresses declarations offered to 

show compliance with 35 USC 112. The instant Declaration was not offered for that 

purpose. Rather, it was offered to show what the Koshisaka teaches to a person 

having ordinary skill. In short, the Office Action must provide a written explanation as to 

why the Declaration is unpersuasive and does not overcome the rejection. Absent any 

such description all of the rejections must be reversed. Ex Parte Mitchell, 2001 Pat. 

App. LEXIS 66 3 . 



2 The Declaration is attached as Exhibit 2 to the Evidence Appendix. 

3 A copy of this decision is attached. 
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b. The Rejection of Claims 1-3, 9-12, 15 and 54-57 under 35 U.S.C. §103(a) 

Turning now to the individual rejections, the Office Action rejected claims 1-3, 
9-12, 15 and 54-57 under 35 U.S.C. §103 as unpatentable over Koshisaka in view of 
Dunphy. This rejection is improper for the reasons set forth above as well as the 
following. The proposed combination of Koshisaka/Dunphy does not address all of the 
limitations of the claims. For the purpose of this discussion, claim 1 is representative of 
claims 2-3, 9-12, 15 and 54-57. Claim 1 is directed to a method for archiving files and 
recites "detecting an instruction by an operating system to perform an operation on an 
operating file". Notwithstanding the comments to the contrary in the Office Action, 
neither Koshisaka nor Dunphy, taken alone or in combination, teach or disclose this 
detecting step. 

As mentioned above, the Office Action errs in equating Koshisaka's API with the 

operating system of the claims. The term "operating system" is defined in the instant 

specification at paragraph 28 as: 

"A computer program that allocates system resources such as 
memory, disk space, and processor usage and makes it possible for 
the computer to boot up to a human user interface allowing the user 
to interact with the computer and control its operation". 

Where an explicit definition is provided by the applicant for a term, that definition 

will control interpretation of the term as it is used in the claim. Toro Co. v. White 

Consolidated Industries Inc., 199 F.3d 1295, 1301, 53 USPQ2d 1065, 1069 (Fed. Cir. 

1999). Here, this axiom is particularly applicable as the definition of the term "operating 

system" set forth in the specification parallels the plain meaning of the term as 

evidenced by Exhibit 1 and the understanding of the skilled artisan as evidenced by 

Koshisaka and Dunphy. 
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Koshisaka, teaches "an application-centric" file revision management system and 
method by which file revision management allegedly can be implemented even if 
applications are not provided with file revision management functions. Koshisaka 
teaches the use of an Applications Programming Interface (API) layer to be placed 
between an application and an operating system. According to Koshisaka, file backup 
reliability of the applications can be improved by this file revision management system. 
See Koshisaka, column 1, lines 57-63. See also Exhibit 4, Paragraph 5. A file 
manipulation monitoring section in Koshisaka first detects file manipulation (e.g., file 
deletion or file name change) that is to be executed by the application by intercepting 
these instructions as they are generated by the application. See Exhibit 4, Paragraph 
6. Koshisaka specifically states, "the file manipulation monitoring section constantly 
monitors API (Application Program Interface) commands which are outputted by the 
application 1 to the operating system and thereby detects the file manipulation which is 
(going to be) executed by the application 1 ." See Koshisaka, column 6, lines 34-38. 

The method of the present invention, as defined by claims 1 and 54, is a "data- 
centric" approach to file archiving, not an application-centric approach. This distinction 
is evidenced by the claim limitations of, "detecting an instruction by an operating 
system to perform an operation on an operating file," and "capturing the operating file 
temporally proximate to the operation being performed on the operating file, responsive 
to the detection of the instruction." 

In direct contrast, Koshisaka is not data-centric; that is, it does not teach 
detection of an instruction by an operating system. Rather, the detected instruction or 
command in Koshisaka is the API command that is generated by the application, not 



the operating system. See Exhibit 4, Paragraphs 5, 6 and 7. For example, in 
Koshisaka, when an API command requesting fife deletion is output by the application, 
the command is detected and hooked by the file manipulation monitoring section in the 
file management system 2. Subsequently, the processing section sends a different API 
command to the operating system. In other words, the instruction is first detected by 
the API and hooked. After the instruction is hooked, a different instruction is passed to 
the operating system, and the original command sent by the API to the operating 
system is not executed during performance of Koshisaka's revision management 
system activities. See Williams declaration, Paragraph 5. 

As a result of detecting the instruction by the application, unlike the present 
invention, it is believed that Koshisaka provides a very limited layer of file protection, as 
file protection occurs only if the application is compatible with Koshisaka's assumptions 
of API behavior. See, Koshisaka, column 7, lines 59-64. See also Exhibit 4, Paragraph 
8. However, because the invention as defined by claim 1 is captures files based on 
operating system instructions, it achieves file protection of intended file change 
operations as well as file changes that result from some type of file corruption. 

Dunphy is directed to a data storage and protection device used for data backup. 
Dunphy, like Koshisaka, teaches an application-centric solution. As illustrated in 
Figure 1, Dunphy depicts an operating system 19, application programs 8 and file 
system 9. Data file monitor 11 is interposed between application programs 8 and file 
system 9. Data file monitor 11 intercepts communications between application 
programs 8 and file system 9. Data file monitor 1 1 reviews the communication to 
determine whether it relates to a data file that the user has selected for monitoring. If 
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the data file is one to be monitored, it is determined whether the communication results 
in a change in content of a data file. If data file change is detected, data file monitor 1 1 
extracts data file status and activity information from the received communications and 
uses this data to build an event log 12. Data file monitor 1 1 also determines whether 
the communication requests an operation that changes the contents of the data file, 
i.e., would cause a loss of data. If so, then the data file is saved. See Dunphy, Column 
3 line 49 to column 4, line 21 . 

Unlike the method of claim 1, Dunphy does not detect an instruction by an 
operating system. Thus, Dunphy suffers from the same deficiencies as Koshisaka. 

Since the combination of Koshisaka and Dunphy does not address all claim 
limitations, the rejection of claims 1-3, 9-12, 15 and 54-57 must be reversed. 

c. The Rejection of claims 34-38, 43-51 and 57-59 

The Office Action rejected claims 34-38, 43-51 and 57-59 under 35 U.S.C. §103 
as unpatentable over Dunphy in view of Koshisaka. This rejection is improper for the 
reasons set forth above as well as the following. The proposed combination of 
Dunphy/Koshisaka does not address all of the limitations of the rejected claims. 

Claim 34 is directed to a method for archiving files including the steps of 
detecting an instruction by an operating system to perform an operation on an operating 
file and creating an archive file from the operating file and storing the archive file in a 
temporary storage location temporally proximate to the operation being performed on 
the operating file and responsive to detecting the instruction. As mentioned above in 
the discussion of the rejection of claims 1-3, 9-12, 15 and 54-57, neither Dunphy nor 
Koshisaka, taken alone or in combination teach or suggest detection of an instruction 
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by an operating system. In addition, neither Dunphy nor Koshisaka teach storing an 
archive file created from the operating file in a temporary first storage location 
responsive to detection of the operating system instruction. Koshisaka teaches that, 
upon detection of only one of a delete command or a file rename command from the 
application, the deleted file name is stored and a corresponding back up file name is 
stored in memory. See Koshisaka, column 7, line 52 to column 9, line 43. 

Unlike the method of claim 34, Dunphy dofisjaot detect an instruction by an 
operating system. Dunphy, much like Koshisaka and other references of record, is 
concerned with communications from the application programs themselves. As 
explained in detail in connection with the discussion of Koshisaka above, the present 
invention as defined by claim 34 performs file capture and file manipulation based on 
instructions from the operating system. This is a significant advance because it allows 
file capture before the file operation is performed, for example. Dunphy is limited to 
addressing files for which an operation that changes the file content is specified, e.g., a 
delete or modify operation. Dunphy would be useless against operations that do not 
intentionally change file content but that may corrupt file content such as file open 
operations or file rename operations. 

It is apparent that the Office Action erred in its factual findings of the differences 
between the Dunphy/Koshisaka combination and the subject matter of claim 34. In 
view of this error, the Office Action failed to establish a prima facie case of obviousness 
as to claims 34-38, 43 and 59. 

i. Claim 44 

With respect to claim 44, it requires that the archive file pass through two storage 
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locations before ending up in permanent storage (its third storage location). The Office 
Action cites to column 4, lines 25-67 of Dunphy as teaching the method of claim 44. 
However, the cited portion of Dunphy does not provide such a teaching. 

Lines 24-38 of Dunphy discuss creation of an event log 12. Event log 12 is not 
an archive file. Rather it is a collection of data that includes identifying information 
about a file. The closest thing that Dunphy teaches to an archive file is the data file 
saved in stash can 13. However, Dunphy does not teach or suggest moving that data 
file from stash can 13 to an intermediate storage location and subsequently to a 
permanent storage location as required by claim 44. Koshisaka provides no additional 
teaching that would have rendered the subject matter of claim 44 obvious to the skilled 
artisan. 

It is apparent that the Office Action erred in its factual findings of the differences 
between the Dunphy/Koshisaka combination and the subject matter of claim 44. In 
view of this error, the Office Action failed to establish a prima facie case of obviousness 
as to claims 44-51 and 58. 

d. The Rejection of claims 4-8 and 13-14 

The Office Action rejected claims 4-8 and 13-14 under 35 U.S.C. §103 as 
unpatentable over Koshisaka in view of Dunphy. The grounds for this rejection are 
identical to rejection (a) of claims 1-3, 9-12, 15 and 54-57. Accordingly, Applicants 
incorporate by reference the arguments advanced in support of patentability above with 
respect to claims 1-3, 9-12, 15 and 54-57. 

e. The Rejection of Claims 39-42 

The Office Action rejected claims 39-42 under 35 U.S.C. § 103 as unpatentable 
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over Dunphy in view of Koshisaka and further in view of Midgely et al., U.S. Patent No. 
5,608,865 (hereinafter Midgely). This rejection is improper for the reasons set forth 
above as well as the following. The proposed combination of Dunphy, Koshisaka and 
Midgely, does not teach all of the limitations of claims 39-42. 
i. Claims 39 and 40 
Claim 39 calls for searching a first storage location for the archive file responsive 
to receipt of a message from a timer. Accordingly, the storage location is searched at 
some specified time interval. The Office Action recognizes that neither Koshisaka nor 
Dunphy teach searching a storage location for the archive file responsive to a message 
from a timer. The Office Action asserts that Midgeiy suggests notifying a user that a file 
change is about to be made via a message from a timer. Office Action, Page 18. 
Applicants submit that the Office Action's assertion about Midgely's teachings are 
completely unsupported. Nowhere does Midgely even remotely indicate to a person 
having ordinary skill in the art that a temporary file location is searched responsive to a 
message from a timer as required by claim 39. The Office Action references a passage 
of Midgely, specifically column 7, lines 59-63, but this passage has nothing to do with 
the relevant claim limitations. At best, Midgely teaches generating a notification when a 
user when a user requests a file open operation. It does not suggest the claimed 
operation of searching a temporary storage location responsive to any type of 
notification, whether that notification is a message from a timer as in claim 39 or a 
message from a resident program as in claim 40. Accordingly, the Office Actions failed 
to establish a prima facie case of obviousness for claims 39 and 40 and the rejection of 
claims 39 and 40 must be reversed. 



ti. Claims 41 and 42 

Regarding claims 41, it calls for moving the archive file to a permanent storage 
location responsive to a message from a timer. Claim 42 calls for moving the archive 
file to a second storage location responsive to a message indicating when the second 
storage location is available. As recognized by the Office Action, neither Koshisaka nor 
Dunphy teach a method of archiving a file wherein archive files are moved to a second 
storage location responsive to receipt of a message. While the Office Action relied on 
Midgely for teaching that an agent is notified when a client requests a file open 
operation, prior to executing the open operation, Midgely offers no teaching that is 
remotely related to the limitations of claims 41 and 42. More particularly, Midgely does 
not teach moving an archive file responsive to a permanent storage location responsive 
to a timer message or a message indicating availability of the permanent storage 
location. Accordingly, the Office Action failed to establish a prima facie case of 
obviousness for claims 41 and 42 and the rejection of claims 41 and 42 must be 
reversed. 
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Conclusion 

In view of the foregoing arguments, it is respectfully submitted that claims 1-18 
and 34-59 are allowable. Reversal of the rejections and allowance of all claims on 
appeal are respectfully requested. 



Respectfully submitted, 
CAHN & SAMUELS, LLP 

Fred srick N. Samuels, Esq. 



, Esq. 
Reg.'No. 34,715 
2000 P Street, N.W., Suite 200 
Washington, D.C. 20036 
(202) 331-8777 (Telephone) 
(202)331-3838 (Facsimile) 
Attorney for Appellants 
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8. CLAIMS APPENDIX 

1 . In a computing device, a method for archiving files comprising: 
detecting an instruction by an operating system to perform an operation on an 

operating file; and 

capturing the operating file temporally proximate to the operation being performed 
on the operating file, responsive to the detection of the instruction. 

2. The method of claim 1 wherein capturing the operating file includes creating an 
archive file and storing the archive file in a storage location. 

3. The method of claim 2 wherein the archive file includes a copy of the operating 

file. 

4. The method of claim 2 wherein the archive file includes portions of the operating 

file. 

5. The method of claim 4 wherein the archive file includes pointers directed to one 
or more storage locations, wherein each of the one or more storage locations contains 
at least a portion of the operating file. 

6. The method of claim 2 wherein capturing the file includes saving the archive file 
prior to the operation being performed on the operating file. 

7. The method of claim 2 wherein capturing the file includes saving the archive file 
subsequent to detecting the instruction to perform the operation. 

8. The method of claim 2 wherein capturing the file includes saving the archive file 
subsequent to the operation being performed on the operating file. 
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9. The method of claim 2 wherein the storage location includes a buffer. 

10. The method of claim 2 wherein the storage location includes a storage 
device. 

1 1 . The method of claim 1 0 wherein the storage device includes at least one of a 
group comprising a magnetic storage medium, an optical storage medium, and a solid- 
state storage device. 

12. The method of claim 1 0 wherein the storage location includes a directory 
disposed on said storage device. 

1 3. The method of claim 1 further comprising determining whether the operating 
file is intended to be captured prior to said capturing step. 

14. The method of claim 1 further comprising determining whether the operating 
file has previously been captured prior to capturing the file. 

15. The method of claim 1 further comprising determining whether the operation 
causes a change in the operating file. 

16. An article of manufacture comprising a computer usable medium having 
computer readable program code for performing the method of claim 1 . 

17. A data transmission signal having computer readable program code for 
performing the method of claim 1 . 

18. An article of manufacture comprising a processor configured to perform the 
method of claim 1 . 

34. In a computing device, a method for archiving files comprising: 
19 



detecting an instruction by an operating system to perform an operation on an 
operating file; 

creating an archive file from the operating file and storing the archive file in a 
temporary first storage location temporally proximate to the operation being performed 
on the operating file and responsive to detecting the instruction; 

searching the first temporary storage location for the archive file responsive to 

the occurrence of a first event; and 

moving the archive file to a second storage location responsive to a second 
event, the second storage location being a permanent storage location. 

35. The method of claim 34 wherein storing the archive file includes storing the 
archive file prior to the operation being performed on the operating file. 

36. The method of claim 34 wherein storing the archive file includes storing the 
archive file prior to the operation being performed on the operating file and subsequent 
to the operation being performed on the operating file. 

37. The method of claim 34 wherein storing the archive file includes storing the 
archive file subsequent to the operation being performed on the operating file. 

38. The method of claim 34 wherein the first temporary storage location includes 
a buffer. 

39. The method of claim 34 wherein the first event includes a message from a 
timer. 

40. The method of claim 34 wherein the first event includes a message from a 
program resident on the computing device. 
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41 . The method of claim 34 wherein the second event includes a message from 
a timer. 

42. The method of claim 34 wherein the second event includes a message 
indicating when the second storage location is available. 

43. The method of claim 34 wherein the second storage location is an output 
buffer. 

44. The method of claim 34 further comprising: 

after storing the archive file in the first temporary storage location, updating a 
database to indicate that the archive file is located in the first temporary storage 
location; 

determining a final destination for the archive file; 

moving the archive file from the first temporary storage location to an 

intermediate storage location; 

updating the database to indicate that the archive file is located in the 
intermediate storage location; and 

after moving the archive file to the second storage location, updating the 
database to indicate that the archive file is located in the second storage location. 

45. The method of claim 44 wherein the second storage location includes a 
personal attached storage device. 

46. The method of claim 44 wherein the second storage location includes a 
network attached storage device. 

47. The method of claim 44 wherein the second storage location includes a peer- 
to-peer storage device. 
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48. The method of claim 44 wherein the second storage location includes an 
Internet storage area network. 

49. An article of manufacture comprising a computer usable medium having 
computer readable program code for performing the method of claim 44. 

50. A data transmission signal having computer readable program code for 
performing the method of claim 44. 

51 . An article of manufacture comprising a processor configured to perform the 
method of claim 44. 

52. The method of claim 2, wherein said capturing step occurs only if a match to a 
defined condition has been determined. 

53. The method of claim 52, wherein said defined condition includes at least one 
of determining whether the operating file has previously been archived and determining 
whether the operating file has been selected for protection. 

54. In a computing device, a method for archiving files, comprising: 
detecting an instruction by an operating system to perform an operation on an 

operating file; and 

capturing the operating fiie just before or just after the operation being performed on 
the operating file, responsive to the detection of the instruction. 

55. The method of claim 54, wherein said capturing occurs an instant before or an 
instant after the operation is performed on the operating file. 



56. The method of claim 54, wherein the operating file is a 
system file. 
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57. The method, of claim 54, wherein the operating file is a 
user file. 



58. The method of claim 34, wherein said first event is different from said 
second event. 

59. In a computing device, a method for archiving files comprising: 
detecting an instruction by an operating system to perform an operation on an operating 

file; 

creating an archive file from the operating file and moving the archive file to a 
first storage device temporally proximate to the operation being performed on the 
operating file, responsive to detecting the instruction; and 

storing the archive file in a second storage device. 



10. EVIDENCE APPENDIX 



EXHIBIT 1 
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11. RELATED PROCEEDINGS APPENDIX 



NONE 
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